Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Yj7Z4O3T_4OFgcJvDON8O9sZ3cQ.roa
File: Yj7Z4O3T_4OFgcJvDON8O9sZ3cQ.roa (raw, json)
Hash identifier: YDlOogzHsGSTZo3rVdCrAX857/Bm2F4SnElxA8x/cN8=
Subject key identifier: 62:3E:D9:E0:ED:D3:FF:83:85:81:C2:6F:0C:E3:7C:3B:DB:19:DD:C4
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019CC8AD9E5CB439AE8F3A7D4094285845CD
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Yj7Z4O3T_4OFgcJvDON8O9sZ3cQ.roa
Signing time: Sat 07 Mar 2026 14:22:27 +0000
ROA not before: Sat 07 Mar 2026 14:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2a0d:d940:3d::/48 maxlen: 48
2a0d:d940:5f0::/44 maxlen: 44
2a0d:d940:90a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:ad:9e:5c:b4:39:ae:8f:3a:7d:40:94:28:58:45:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Mar 7 14:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=623ed9e0edd3ff838581c26f0ce37c3bdb19ddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ce:db:58:f7:3e:1c:3a:ca:eb:52:e0:33:ab:
d7:ae:fa:9e:65:01:85:aa:70:3d:3d:f8:7e:ac:7e:
1a:7c:49:fc:c4:e8:02:c0:88:37:a4:a4:c4:84:94:
12:5c:f6:fb:6d:96:f8:fc:4f:55:aa:73:1a:9f:ee:
b8:18:68:68:b9:51:20:e1:40:dc:3d:33:b2:1d:d4:
b4:e1:bf:f7:4e:d6:c4:80:70:b0:8b:48:6e:69:43:
03:19:0b:55:23:e9:1a:de:00:46:5f:b4:56:da:70:
5f:a4:6b:4e:e2:c5:9c:f2:46:83:ec:90:b5:be:eb:
51:dc:72:47:bb:5c:b1:42:02:82:6b:4b:f0:46:31:
bd:9f:57:ed:b8:af:79:8b:be:a1:47:f7:d5:c3:8c:
19:80:fb:fd:60:22:5a:2b:62:f4:f9:fa:dd:f0:0f:
f2:d7:6b:a6:b8:21:b8:77:f9:0e:99:b6:d4:bb:bc:
4e:5a:1d:00:61:63:bb:e7:ee:ac:7b:bf:bd:eb:5c:
57:ea:f2:4e:24:f4:31:20:9f:fa:1b:75:a2:68:2d:
0b:45:75:f7:06:bc:54:93:bf:ca:eb:90:11:e0:5d:
5c:53:65:6d:2d:46:48:d5:56:cf:69:82:3b:de:98:
44:a4:66:30:83:5c:39:26:11:81:ba:f1:ec:f5:97:
46:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3E:D9:E0:ED:D3:FF:83:85:81:C2:6F:0C:E3:7C:3B:DB:19:DD:C4
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/Yj7Z4O3T_4OFgcJvDON8O9sZ3cQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:3d::/48
2a0d:d940:5f0::/44
2a0d:d940:90a0::/48
Signature Algorithm: sha256WithRSAEncryption
3b:0c:a7:1c:1a:9a:4a:77:5d:63:60:7d:f6:16:8d:3d:13:a6:
37:de:d3:24:87:06:33:ab:e1:23:0c:46:85:68:56:d8:93:d9:
8f:ef:f9:0a:04:02:2f:73:7a:bf:59:4d:d9:e5:1b:5b:15:a7:
96:0e:2a:cc:4e:b1:f4:22:01:70:a0:27:27:2f:db:34:40:5b:
67:a8:60:59:ed:9a:a3:12:e5:c6:a9:09:59:63:78:bc:f4:2e:
31:8a:5e:b7:5c:00:e6:4d:2a:d5:7f:f3:6f:aa:c3:e9:f0:d7:
9f:5b:20:36:7e:b9:fb:37:b3:77:4f:51:f1:83:75:15:d2:34:
41:2c:66:ee:0b:6e:f3:5a:88:59:1d:0e:3c:63:28:c8:f3:d0:
81:7b:f0:dc:e8:09:07:8f:ff:a6:eb:1e:7b:13:2b:30:46:e7:
7b:f7:ac:52:15:21:d9:f8:b4:33:e1:ad:d4:cd:ba:5d:b2:45:
3b:c8:ae:1d:c4:92:32:7d:1d:e0:48:d5:75:63:35:54:49:b5:
68:54:b4:ae:dc:e5:e8:2d:52:cb:b3:bb:42:09:6f:e9:12:51:
be:92:b5:76:5e:a0:e2:3a:10:79:53:f5:43:c9:4d:ef:70:a0:
17:cb:b2:58:94:1e:b2:37:cc:39:9d:31:de:69:ac:f1:03:e9:
70:d7:3a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 03:27:44 2026 by rpki-client